Server Help :: View topic - hijacked server?

Server Help

Trash Talk - hijacked server?

Anonymous - Tue Aug 07, 2007 10:29 pm
Post subject: hijacked server?

a long story short.

Ages back I had a suspicion my server details may have been swiped and a guy I know who hosts on the same box may have somehow gotten control of my traffic. I could NOT prove this. Nor do I know how it would be done exactly. Other than I know that it "could" be possible to allow my IP rage to connect and yet divert other visitors to my server/domain name IF someone other than me was running things.

Anyway. I cut off talking to this guy via ICQ etc. and changed IP and usernames and passwords etc etc.

Built up a new biz. Launched and things were going GREAT for sales.

Then I happened to get back in touch with this guy and very soon there after I'm seeing EXACTLY the same results as before. A sharp drop in sales from like 1:300 to 1: 4000 visits. However, my traffic seems to be there and is actually increasing.

So this is my question:

Is it possible that someone could get my login and server access (He's hosted on same host too which he did AFTER I moved from my previous host!) and somehow divert traffic after it arrives on my server without me being able to check if its happening?

He had asked once what anonymous proxy services I knew about BTW. I've tried to surf anon on site and all seems fine.

Anyway, please, I don't even know where I should ask this very paranoid sounding question. I asked my host, but since its HIS host also and they dismissed my questions last time, I need some kind of independent way to check this stuff. Any idea where I can ask? What I could do to prove myself delusional? Will be greatly appreciated.

Kind regards
ROMmel

Samapico - Tue Aug 07, 2007 11:06 pm
Post subject:

This forum is for server questions related to the game Continuum... Which doesn't have much to do with what you're talking of.

...But this will probably be moved to trash talk, where maybe someone could help you

D1st0rt - Wed Aug 08, 2007 12:37 am
Post subject:

The only ways I can think of that he would be able to redirect your traffic would be through dns or by editing your files

anyone else got differential?

Anonymous - Wed Aug 08, 2007 3:29 am
Post subject:

Yes I'm sorry to be off topic. That's why I asked where I best ask as I have NO idea. I though maybe a "hacker" forum.. however.. that could prove calamitous as a guy admitting he knows very little about security issues (obviously)

However the response about DNS is the sort of thing I'm asking for.

I guess I should have asked like:

IF this IS going on.. How would it be done possibly?.. and HOW - WHERE would I look for the evidence?

If I knew what to do for that. I could then ask my tech and have something other then "a real bad feel'n" to present them with.

(I should add I have been a webby for 12 years and there is a LOT more to this story, just that I wanted to keep it short as I said)

So yes, please give me some ideas I can check. I need to know where and what I would look for.
I would LOVE to just be paranoid BTW

Cerium - Wed Aug 08, 2007 11:39 am
Post subject:

Some questions that may help pinpoint this issue...

-What kind of hosting do you have (Virtual, Shared, etc)?
-Do you happen to share a box with him?
-What type of web server and how is it setup?
-Who registered your domain and who manages the DNS?

Maverick - Wed Aug 08, 2007 2:30 pm
Post subject:

http://www.webhostingtalk.com/

Anonymous - Thu Aug 09, 2007 5:14 am
Post subject:

Cerium wrote:

Some questions that may help pinpoint this issue...

-What kind of hosting do you have (Virtual, Shared, etc)?
shared
-Do you happen to share a box with him?
no- he has a separate server
-What type of web server and how is it setup?
freedsd
-Who registered your domain and who manages the DNS?

I register.. however, host handles dns on server.. one thing that happened also was that I recently set a new domain on server..it resolved..but not found in my ftp..
wtf? I contact support.. surprise the guy has installed in on another of there servers he said was associated with my account.. well.. when I asked what account that would be.. guess whose? And why would mine be associated with that account? No reason apparently.. musta been a coincidence or act of God or so..

Anyway, I imagine you mean who managers the dns on my server? No?

Thanks for link !

Doc Flabby - Thu Aug 09, 2007 6:22 am
Post subject:

Maverick wrote:

http://www.webhostingtalk.com/

ya thats prob the best place to go for this kinda prob, they talk non-stop about these things kinda all day there....

Anonymous - Thu Aug 09, 2007 6:44 am
Post subject:

Ok I will post there also thanks

Cheese - Thu Aug 09, 2007 9:51 pm
Post subject:

hmm
it seems our forum is attracting the rare "smart ppl".

highly regarded is a good thing

Sonic VI - Sat Aug 11, 2007 3:41 pm
Post subject:

meh i hijack servers all the time i might hijacked urs.

Jonus - Sat Aug 11, 2007 3:47 pm
Post subject:

Sonic, I doubt you could hack your way out of a wet paper bag.

Solo Ace - Sat Aug 11, 2007 4:46 pm
Post subject:

Ooh! That sounds originally intelligent.

BDwinsAlt - Sun Aug 12, 2007 12:03 am
Post subject:

i r h4xZ y3W!!1!

I'd find a new host/dns person.
I use godaddy.com and I host my site from my home pc. I have complete control of the dns and files, so I don't think I'm being hijacked. (Or am I :X)

You could get a new DNS and webhost and I think you'd be set.